|
|
Development and testing of a module for HTTP/2 in the Apache JMeter program
Szymutko, Roman ; Martinásek, Zdeněk (referee) ; Šeda, Pavel (advisor)
This thesis focuses on the development of new modules for the software Apache JMeter. These modules implement an HTTP/2 protocol, which is not yet globally adopted. This means that it is not supported on all applications and servers, including Apache JMeter. These new modules add options for testing the new version of HTTP and are meant for simulating traffic on a server targeted by a Denial of Service attack. These modules allow an execution of an HTTP/2 flood attack and a Slow Read attack. The theoretical chapter of this thesis describes technical details about HTTP, JMeter principles, its alternatives, and also classical DoS and slow DoS attacks. The main advantage of Slow DoS attacks is low usage of network capacity for their function. Lastly in this text, there are also described two main components in depth: the newly developed modules and the web server used for testing the modules' functionality.
|
|
| |
|
|
A software tool for checking the secure settings of the parameters of the selected database
Hlavica, Adam ; Štůsek, Martin (referee) ; Šeda, Pavel (advisor)
This thesis deals with the design and implementation of a software tool for best practice database configuration checking. The theoretical part describes database technologies, their applications and existing solutions in the field of automated database configuration checking. Furthermore, possible configurations of the PostgreSQL database system are presented with a focus on security. The practical part shows the design of a program with the necessary requirements and its implementation in Python. The final chapter focuses on a practical demonstration of the program deployment.
|
|
|
Design and implementation of a digitally signed report in the Apache JMeter
Procházka, Martin ; Člupek, Vlastimil (referee) ; Šeda, Pavel (advisor)
This thesis focuses on the development of a plugin for Apache JMeter to automatically generate report from the results of performance testing provided by other modules. In the theoretical part, it discusses the capabilities of Apache JMeter, stress testing in general, the structure of PDF document, the theory of digital signature and relevant cryptographic requirements. The practical part deals with the implementation of the report generator. First, it introduces the content of the report, then it discusses the principles of HTML and PDF report generation. Finally, the paper discusses the insertion of a digital signature into a PDF document.
|
|
|
Encryption in the PostgreSQL database system
Pavlíček, Michal ; Ilgner, Petr (referee) ; Šeda, Pavel (advisor)
Bakalářská práce se zabývá problematikou šifrování v databázovém systému PostgreSQL. Teoretická část práce detailně vysvětluje základní pojmy spojené s databázemi a šifrováním, dat mimo využití a dat přenášených po síti. Popisuje frekventovaně využívaných šifrovacích algoritmů, je vysvětlena problematika typů klíčů a jejich managementu. Analyzovány jsou bezpečnostní funkce pěti hlavních databázových systémů. Praktická část práce zahrnuje implementaci tří nástrojů pro nastavení transparentního šifrování v PostgreSQL a jejich popis. Bylo zjištěno, že PostgreSQL neposkytuje možnost transparentního šifrování na úrovni databáze, ale lze ji šifrovat na úrovni souborového systému nebo pomocí modulu pgcrypto na úrovni sloupců v relační tabulce. Měření výkonu ukázalo, že transparentní šifrování na úrovni databáze dosahuje v průměru lepšího výkonu i zabezpečení než šifrování souborového systému, ačkoli jednotné nastavení konfigurace může ovlivnit výkon šifrování. Práce přináší ucelený pohled na problematiku šifrování v PostgreSQL a poskytuje relevantní informace pro rozhodování v oblasti databázové bezpečnosti.
|
|
|
Tools for application server penetration testing
Vašíček, Tomáš ; Šeda, Pavel (referee) ; Martinásek, Zdeněk (advisor)
This thesis explores the field of penetration testing of application protocols. The thesis introduces the application protocols FTP, SSH, SMTP, POP3 and IMAP and explores their possible vulnerabilities. Information about vulnerabilities is obtained from publicly available collections such as HackTricks and The Hacker Recipes, but also by studying the RFC documents of each protocol. Based on the vulnerabilities found, penetration testing checklists are constructed to provide guidance through the process of testing a given protocol. The main contribution of the work is the development of a modular automated tool ptapptest and another auxiliary tool ptntlmauth, which are used for penetration testing of the mentioned application protocols. Finally, the thesis concludes by testing the ptapptest tool on application servers discovered using the Shodan search engine.
|
|
|
Network Scanner for PowerShell
Sabota, Dominik ; Šeda, Pavel (referee) ; Martinásek, Zdeněk (advisor)
This study focuses on the development and implementation of a network scanning tool for the scripting language Powershell version 5.1 and higher. This tool, named Oculus, was specifically designed for the use of sophisticated network scanning methods during penetration testing and other security audits, thereby becoming part of the broader context of cybersecurity. Within the set requirements and limitations, the Oculus tool was successfully implemented. This work thoroughly analyzes the process of development and implementation of this tool, its limitations, and their impact on overall effectiveness, which is subsequently tested and evaluated. Although the development process brought certain challenges, the testing results confirmed that the Oculus tool provides valuable outputs, thereby confirming its usability in the matter of improving cybersecurity.
|
|
| |
|
|
Mobile applications for subjective measurement QoE of streaming video
Šeda, Pavel ; Hošek, Jiří (referee) ; Kováč, Dominik (advisor)
This thesis is focused on the subjective measurement of the quality of experience on streaming video through a mobile application. After wide analysis of possibilities how to realize subjective measurement of quality of experience, the mobile and web application were created. These tools enable to obtain user ratings of streaming videos and then evaluate them. The user ratings are stored to the central database via secured REST API.
|
|
| |
guest ::
RSS feed.